Slashdot

Recruitment ad hits social media feeds of mobile phones located outside or inside the diplomatic compound. From a report: The FBI is trying a novel strategy to recruit Russian-speaking individuals upset about the country's invasion of Ukraine: aiming social media ads at cellphones located inside or just outside the Russian Embassy in Washington. The ads, which appear on Facebook, Twitter and Google, are carefully geographically targeted. A Washington Post reporter standing next to the embassy's stone walls on Wednesday morning received the ad in their Facebook feed. But the ads did not appear in the feed when the reporter stood on the other side of Wisconsin Avenue NW, in the District's Glover Park neighborhood. The ads are designed to capitalize on any dissatisfaction or anger within Russian diplomatic or spy services -- or among Russian emigres to the United States -- over the invasion of Ukraine, an event that counterintelligence experts call a huge opportunity for the U.S. intelligence community to recruit new sources. The unlikely star of the campaign is Russian President Vladimir Putin, whose own words are used to encourage people working in or visiting the embassy to talk to the FBI. The ad quotes Putin at a meeting last month where he publicly chastised his intelligence chief, Sergey Naryshkin, correcting the spy boss's position on Russian policy toward the separatist eastern regions of Ukraine. Naryshkin, the director of Russia's Foreign Intelligence Service, or SVR, stammered at the meeting and seemed unsure of what Putin wanted him to say.Read more of this story at Slashdot.

An anonymous reader quotes a report from New Atlas: If you've ever eaten okra, then you'll know that the stuff can be pretty gooey. According to new research, that quality could allow a compound from the plant to be used in a less toxic method of removing microplastics from drinking water. [...] After some experimentation, it was found that polysaccharides from okra paired with those from fenugreek worked best at removing microplastics from seawater, while those same okra polysaccharides paired with those from tamarind were best for use on freshwater. All in all, depending on factors such as the ratio of the polysaccharides and the water source, the plant-based flocculants performed either as well as or better than polyacrylamide. And importantly, they could be used in existing water treatment plants, without any alterations to the facilities or processes. The scientists are now investigating how well other combinations of plant-derived polysaccharides will work on specific types of plastic microparticles, in water from a variety of sources. The findings have been reported via EurekAlert. The American Chemical Society Meeting Newsroom channel on YouTube also produced a video about the research.Read more of this story at Slashdot.

sciencehabit shares a report from Science.org: When he was 25, materials scientist Ernesto Di Maio developed a yeast allergy and broke out in hives whenever he ate pizza, which was somewhat embarrassing for a son of Naples, Italy. "My wife loves pizza, and this sometimes creates tension on the night menu," he says. Now, Di Maio can look forward to carefree dinners, for he and his colleagues have invented a yeast-free method of leavening pizza dough. In a classically prepared pizza, as with most bread, yeast ferments and releases carbon dioxide to give the dough a foamlike consistency. Baking then drives off the water and locks in the airy texture. Di Maio's team at the University of Naples Federico II (UNINA) thought it might be able to produce the same effect in a different way: by infusing the dough with gas at high pressure and releasing the pressure during baking, adapting a method they'd developed to manufacture polyurethane. "The aim was to try to make the same texture that we love so much in pizza without a chemical agent," says co-author and UNINA materials scientist Rossana Pasquino. [...] The end result: "We tried it, and it was nice and crusty and soft," Di Maio says.Alessio Cappelli, a food technologist at the University of Florence, says the paper is "interesting," but he wonders whether the method will be widely used in practice, given that baker's yeast is so cheap and easy. "It looks like an innovation just for the sake of it," he says. The study has been published in the journal Physics of Fluids.Read more of this story at Slashdot.

An international team of researchers analyzing the sounds captured by the Perseverance rover has determined the speed of sound on Mars. Phys.org reports: Baptiste Chide, with Los Alamos National Laboratory, gave a presentation (PDF) at this year's 53rd Lunar and Planetary Science Conference outlining the findings by the team. [...] Chide reported that the team has used data from the microphone to measure the speed of sound on Mars. This was done by measuring the amount of time it took for sounds emanating from laser blasts from Perseverance to return to the rover's microphone. The laser blasts were used to vaporize nearby rocks to learn more about their composition. They found sound to be traveling on Mars at approximately 240 m/s. But they also found that different frequencies of sound travel at different speeds on Mars. The speed increases by approximately 10 m/s above 400 Hz. This finding suggests that communication would be extremely difficult on Mars with different parts of speech arriving to listeners at different times, making conversations sound garbled. Chide says the microphone also allowed for measuring temperature on Mar's surface in and around the rover. This is because sound travels at different speeds depending on temperature. By measuring sound speed every time Perseverance fired its laser, the researchers were able to calculate rapid temperature changes. Chide also noted that the research team plans to continue monitoring and analyzing sounds from Mars over the course of a year to learn more about fluctuations during different events on the planet, such as during the winter months or when dust storms kick up.Read more of this story at Slashdot.

An anonymous reader quotes a report from Motherboard: Last June, the Department of Defense released a long-awaited and much-hyped document called "Preliminary Assessment: Unidentified Aerial Phenomena," detailing the government's knowledge of UFOs and its programs trying to detect and catalog them. Many UFOlogists hoped that the "UFO report" would be a watershed moment in the field, showing that the government was taking UFOs seriously and, perhaps, explaining what the government thought they were. Unfortunately, the nine-page report was pretty underwhelming; for the most part it revealed things we already knew, and read primarily like a plea from the DoD for more funding. Tantalizingly, we were told that members of Congress received a classified briefing with more information that would likely never be released to the public. John Greenewald, the government transparency virtuoso behind the Black Vault, however, has a gift for us today: A redacted version of the classified report, obtained by filing a mandatory declassification review. This version of the report is longer and much more interesting -- detailing, for example, the most "common shapes" of UFOs spotted by the military. Certain sections of the classified report, such as one called "And a Handful of UAP Appear to Demonstrate Advanced Technology," have far more detail on specific incidents that the Department of Defense cannot explain and that are not mentioned in the public report, including seemingly two different incidents witnessed by multiple pilots and officers in the Navy. A section called "UAP Probably Lack a Single Explanation" seemingly attempts to go into greater depth exploring what those explanations could be, and also has an extra redacted paragraph about what the DoD believes could be attributed to "Foreign Adversary Systems." Most interestingly, redacted figures, images, and diagrams in the classified reports explain what the DoD believes to be the most "common shapes" of UFOs, as well as "less common/irregular shapes." These sections are completely omitted in the public report and are unfortunately redacted in the version of the report obtained by Greenewald. The classified report also explains that the FBI has investigated and will continue to investigate UFOs in an attempt to ascertain the causes of the phenomena; a redacted section seems to explain which instances it has investigated. "Given the national security implications associated with potential threats posed by UAP operating in close proximity to sensitive military activities, installations, critical infrastructure, or other national security sites, the FBI is positioned to use its investigative capabilities and authorities to support deliberate DoD and interagency efforts to determine attribution," the report reads.Read more of this story at Slashdot.

NASA plans to encourage the development of another commercial vehicle that can land its Artemis astronauts on the moon. Space.com reports: In April 2021, NASA picked SpaceX to build the first crewed lunar lander for the agency's Artemis program, which is working to put astronauts on the moon in the mid-2020s and establish a sustainable human presence on and around Earth's nearest neighbor by the end of the decade. But SpaceX apparently won't have the moon-landing market cornered: NASA announced today (March 23) that it plans to support the development of a second privately built crewed lunar lander. "This strategy expedites progress toward a long-term, sustaining lander capability as early as the 2026 or 2027 timeframe," Lisa Watson-Morgan, program manager for the Human Landing System Program at NASA's Marshall Space Flight Center in Alabama, said in a statement today. "We expect to have two companies safely carry astronauts in their landers to the surface of the moon under NASA's guidance before we ask for services, which could result in multiple experienced providers in the market," Watson-Morgan added. [...] Congress is "committed to ensuring that we have more than one lander to choose [from] for future missions," [NASA Administrator Bill Nelson] said during a news conference today, citing conversations he's had with people on Capitol Hill over the past year. "We're expecting to have both Congress support and that of the Biden administration," Nelson said. "And we're expecting to get this competition started in the fiscal year [20]23 budget." Exact funding amounts and other details should be coming next week when the White House releases its 2023 federal budget request, he added. "So what we're doing today is a bit of a preview," Nelson said. "I think you'll find it's an indication that there are good things to come for this agency and, if we're right, good things to come for all of humanity." NASA plans to release a draft request for proposals (RFP) for the second moon lander by the end of the month and a final RFP later this spring, agency officials said. If all goes according to plan, NASA will pick the builder of the new vehicle in early 2023. That craft will have the ability to dock with Gateway, the small moon-orbiting space station that NASA plans to build, and take people and scientific gear from there to the surface (and back). This newly announced competition will be open to all American companies except SpaceX. But Elon Musk's company will have the opportunity to negotiate the terms of its existing contract to perform additional lunar development work, NASA officials said during today's news conference.Read more of this story at Slashdot.

A 20-year-old Ukrainian man named "Fadey" managed to escape the war and cross into Poland with 40% of his life savings in bitcoin contained on a USB stick. Finbold reports: His experience starts with the invasion and the realization that he would soon have to flee his homeland, for which he needed money. Cash was out of the question. "I couldn't withdraw cash at all, because the queues to ATMs were so long, and I couldn't wait that much time," he said. However, he had a USB stick that contained around $2,000 in Bitcoin, equalling around 40% of Fadey's life savings. The funds on the drive were accessible to him with a unique passcode, allowing him to pay for his survival in another country. "I could just write my seed phrase on a piece of paper and take it with me," he explained. The story was first reported by CNBC.Read more of this story at Slashdot.

"A bipartisan proposal in both the House and Senate would sharply limit the ability to seize emails without notice to the owner," writes longtime Slashdot reader hawk. "It places a six-month limit on the length of gag orders in warrants." The Hill reports: The Government Surveillance Transparency Act, sponsored by a bipartisan group of lawmakers from both chambers, puts limitations on gag orders that seek to block tech companies from altering users whose data has been seized. It targets a practice brought into the spotlight after journalists from CNN, The New York Times and The Washington Post all had their records seized by the Department of Justice (DOJ). The bill requires law enforcement agencies to notify surveillance subjects that their email, location and web browsing data has been seized, aligning with current practices for phone records and bank data. "When the government obtains someone's emails or other digital information, users have a right to know," Sen. Ron Wyden (D-Ore.) said in a release. "Our bill ensures that no investigation will be compromised, but makes sure the government can't hide surveillance forever by misusing sealing and gag orders to prevent the American people from understanding the enormous scale of government surveillance, as well as ensuring that the targets eventually learn their personal information has been searched."Read more of this story at Slashdot.

The price of Cashio's dollar-pegged stablecoin CASH has fallen from $1 to $0.00005 after an "infinite mint glitch" enabled attackers to mint tokens without providing collateral. Decrypt reports: Cashio developer 0xGhostChain took to Twitter to warn people "not to mint any CASH," adding that the team "are investigating the issue and we believe we have found the root cause. Please withdraw your funds from pools. We will publish a postmortem ASAP." According to DeFiLlama, roughly $28 million of value has been drained from Cashio's protocol due to the exploit. Still, Samczsun, a research partner at Web3 investment firm Paradigm, shared a bleaker picture on Twitter today. The researcher wrote: "Another day, another Solana fake account exploit. This time, Cashio App lost around $50M (based on a quick skim). How did this happen?" The project has not responded to Decrypt to confirm the scale of the attack.Read more of this story at Slashdot.

An anonymous reader quotes a report from Bloomberg: Cybersecurity researchers investigating a string of hacks against technology companies, including Microsoft and Nvidia, have traced the attacks to a 16-year-old living at his mother's house near Oxford, England. Four researchers investigating the hacking group Lapsus$, on behalf of companies that were attacked, said they believe the teenager is the mastermind. The teen is suspected by the researchers of being behind some of the major hacks carried out by Lapsus$, but they haven't been able to conclusively tie him to every hack Lapsus$ has claimed. The cyber researchers have used forensic evidence from the hacks as well as publicly available information to tie the teen to the hacking group. Bloomberg News isn't naming the alleged hacker, who goes by the online alias "White" and "breachbase," who is a minor and hasn't been publicly accused by law enforcement of any wrongdoing. Another member of Lapsus$ is suspected to be a teenager residing in Brazil, according to the investigators. One person investigating the group said security researchers have identified seven unique accounts associated with the hacking group, indicating that there are likely others involved in the group's operations. The teen is so skilled at hacking — and so fast-- that researchers initially thought the activity they were observing was automated, another person involved in the research said. [...] The teenage hacker in England has had his personal information, including his address and information about his parents, posted online by rival hackers. At an address listed in the leaked materials as the teen's home near Oxford, a woman who identified herself as the boy's mother talked with a Bloomberg reporter for about 10 minutes through a doorbell intercom system. The home is a modest terraced house on a quiet side street about five miles from Oxford University. The woman said she was unaware of the allegations against her son or the leaked materials. She said she was disturbed that videos and pictures of her home and the teen's father's home were included. The mother said the teenager lives at that address and had been harassed by others, but many of the other leaked details couldn't be confirmed. She declined to discuss her son in any way or make him available for an interview, and said the issue was a matter for law enforcement and that she was contacting the police.Read more of this story at Slashdot.

Arizona residents can now add their drivers' license, or state ID, to Apple Wallet, which lets them use an iPhone, or Apple Watch, to check in at selected TSA checkpoints. Apple Insider reports: As Apple continues to discuss bringing digital drivers' licenses to US states, Arizona has become the first to take the system live for its residents. "We're thrilled to bring the first driver's license and state ID in Wallet to Arizona today," said Jennifer Bailey, Apple's vice president of Apple Pay and Apple Wallet, in a statement, " and provide Arizonans with an easy, secure, and private way to present their ID when traveling, through just a tap of their iPhone or Apple Watch." "We look forward to working with many more states and the TSA to bring IDs in Wallet to users across the US," she continued. At launch, Wallet can be only be used at an unspecified number of TSA security checkpoints at Phoenix Sky Harbor International Airport. Apple also announced that the states of Colorado, Hawaii, Mississippi, Ohio, and the territory of Puerto Rico plan to bring the technology to its residents. This is in addition to seven other states that Apple previously announced.Read more of this story at Slashdot.

Stephen Wilhite, one of the lead inventors of the GIF, died last week from COVID at the age of 74, according to his wife, Kathaleen, who spoke to The Verge. From the report: Stephen Wilhite worked on GIF, or Graphics Interchange Format, which is now used for reactions, messages, and jokes, while employed at CompuServe in the 1980s. He retired around the early 2000s and spent his time traveling, camping, and building model trains in his basement. Although GIFs are synonymous with animated internet memes these days, that wasn't the reason Wilhite created the format. CompuServe introduced them in the late 1980s as a way to distribute "high-quality, high-resolution graphics" in color at a time when internet speeds were glacial compared to what they are today. "He invented GIF all by himself -- he actually did that at home and brought it into work after he perfected it," Kathaleen said. "He would figure out everything privately in his head and then go to town programming it on the computer." If you want to go more in-depth into the history of the GIF, the Daily Dot has a good explainer of how the format became an internet phenomenon. In 2013, Wilhite weighed in on the long-standing debate about the correct pronunciation of the image format. He told The New York Times, "The Oxford English Dictionary accepts both pronunciations. They are wrong. It is a soft 'G,' pronounced 'jif.' End of story."Read more of this story at Slashdot.

An anonymous reader quotes a report from Bloomberg: Instagram will let users switch their feeds so they view the most recent posts first, relenting after years of complaints about the photo app's current ranking that chooses the order of posts based on a user's behavior. Meta's Instagram is introducing two options for its feed, "Following" and "Favorites," according to a blog post Wednesday. Following works the way Instagram did up until 2016: it shows posts in reverse-chronological order. Favorites allows further curation, letting users list up to 50 accounts they wish to see higher in their feeds. "We want people to feel good about the time they spend on Instagram, by giving them ways to shape their experience into what's best for them," the company said in a statement Wednesday. Instagram introduced an algorithmic ordering for its feed because professional users, such as influencers and brands, had started posting so frequently and strategically that they would drown out content from regular users, people familiar with the matter have said. Regular users started to think their friends weren't using Instagram. The 2016 algorithm was trained so that it showed people whatever content would inspire them to post more, the people said. While the change did help increase visibility for content from users' friends and family, it drew backlash from professionals, whose follower growth started slowing, as well as regular users, who didn't like the decrease in control. Instagram says people are more satisfied with the current algorithm's ordering, "so we are not defaulting people into a chronological feed experience,â Instagram said in its statement. "To use Favorites and Following, tap on Instagram in the top left corner of your home page to choose what you see."Read more of this story at Slashdot.

The US Department of Justice and 14 state attorneys general yesterday asked a federal judge to sanction Google for misusing attorney-client privilege to hide emails from litigation. From a report: "In a program called 'Communicate with Care,' Google trains and directs employees to add an attorney, a privilege label, and a generic 'request' for counsel's advice to shield sensitive business communications, regardless of whether any legal advice is actually needed or sought. Often, knowing the game, the in-house counsel included in these Communicate-with-Care emails does not respond at all," the DOJ told the court. The fact that attorneys often don't reply to the emails "underscor[es] that these communications are not genuine requests for legal advice but rather an effort to hide potential evidence," the DOJ said. The DOJ made its argument in a motion to sanction Google "and compel disclosure of documents unjustifiably claimed by Google as attorney-client privileged" and in a memorandum in support of the motion. "The Communicate-with-Care program had no purpose except to mislead anyone who might seek the documents in an investigation, discovery, or ensuing dispute," the DOJ alleged.Read more of this story at Slashdot.

In three weeks of fighting, Russia has lost at least 270 tanks, according to the open source weapons tracking site Oryx -- almost 10% of its estimated active force. From a report: Ukraine's defense is proving so effective, in fact, that many analysts are attributing the failure of Russia's offense not only to its commanders, or to its tanks, but to the very idea of the tank itself, as a front-line weapon platform that can gain ground. The emerging evidence of tanks' tactical weakness is "striking," as one expert put it, and it has opened up a debate about whether tanks might be on their way to joining chariots and mounted cavalry in the boneyard of military history. Cheap, low-flying drones are striking tanks from above. Soldiers are using charred suburban landscape to ambush tanks with a new generation of fire-and-forget weapons that makes tank-killing unsettlingly simple, even in the hands of a volunteer. "An infantry that is determined to fight is now super-empowered by having things like a huge number of point-and-shoot disposable anti-tank rockets," Edward Luttwak, a military strategist who consults for governments around the world, told Insider. Tanks have ruled land warfare for more than 80 years. It's their job to punch through enemy positions so infantry can flood in and hold the newly gained ground. Tanks have long been susceptible to soldier-carried weapons like bazookas and recoilless rifles, as well as improvised explosives such as the anti-tank "sticky bombs" seen in the film "Saving Private Ryan." But looking at the ineffectiveness of Russian tank attacks in Ukraine, one can see how technology -- particularly advances in high explosives and guided missiles -- is further tipping the odds to favor anti-tank defenders, to the point where tanks could arguably be rendered obsolete. One defense analyst who spoke with Insider compared the role of tanks to that of the Swiss pikemen, Renaissance-era fighters armed with pikes and halberd who once were an army's frontlines. This vanguard role, held then by foot soldiers and now by tanks, will likely shift to drones, robotic vehicles, and long-range strike systems. "Tanks are going to move, over time, into more of a mopping-up role," said Paul Scharre, a former US Army Ranger and a director of studies at the Center for a New American Security.Read more of this story at Slashdot.

An anonymous reader shares a report: Last year, the Google TV app user interface was completely redesigned and transformed into a hub for browsing movies and shows from your favorite streaming apps all in one place. It now appears that more changes are coming to the platform as Google has announced that in May 2022, movies or TV shows will no longer be available in the Google Play store. Instead, the Google TV app will be the official home for buying, renting, and watching movies and shows on your Android device. Other apps, games, and books will continue to live on the store. On Google TV, the experience of using Google Play Movies & TV will still be the same and users will get access to the latest new releases, rentals, and deals. When taking a look at the new Google TV app, customers will see a Shop tab where they can find all the titles that the tech giant offers.Read more of this story at Slashdot.

Amid increasing global regulations over app stores and their commission structures, Google today announced the launch of a pilot program designed to explore what it calls "user billing choice." From a report: The program will allow a small number of participating developers, starting with Spotify, to offer an additional third-party billing option next to Google Play's own billing system in their apps. While Google already offers a similar system in South Korea following the arrival of new legislation requiring it, this will be the first time it will test the system in global markets. As the debut pilot partner, Spotify will introduce both their own billing system alongside Google Play's own when the pilot goes live. Google did not say which other developers it has lined up for future tests, but noted Spotify was a "natural first partner" on the effort given its reach as one of the "world's largest subscription developers with a global footprint" and its "integrations across a wide range of device form factors." Spotify, of course, has also been one of the larger developers to push for regulatory changes to app stores' existing billing systems, having testified before Congress on the matter, joined lobbying groups, and backed app store legislation, including the Open Markets Act, that would require companies like Apple and Google to permit alternatives to existing app stores.Read more of this story at Slashdot.

Nvidia, one of the largest buyers of outsourced chip production, said it will explore using Intel as a possible manufacturer of its products, but said Intel's journey to becoming a foundry will be difficult. From a report: Nvidia Chief Executive Officer Jensen Huang said he wants to diversify his company's suppliers as much as possible and will consider working with Intel. Nvidia currently uses Taiwan Semiconductor Manufacturing Co and Samsung Electronics to build its products. "We're very open-minded to considering Intel," Huang said Wednesday in an online company event. "Foundry discussions take a long time. It's not just about desire. We're not buying milk here."Read more of this story at Slashdot.

Microsoft announced on Wednesday that it will expand its cybersecurity skilling initiative to 23 additional countries. The campaign, which began last year in the U.S., is part of the company's push to help solve the cybersecurity industry's growing talent problem, while also helping diversify the industry. From a report: Like many industries within tech, cybersecurity is facing both a workforce shortage and a widening skills gap among workers. According to Kate Behncken, vice president and lead of Microsoft Philanthropies, by 2025 there will be 3.5 million cybersecurity jobs open globally. Microsoft originally launched the skilling campaign in the U.S. last fall, partnering with 135 community colleges to skill and recruit workers into the cybersecurity industry. By expanding skilling and training to 23 countries, Microsoft aims to get ahead of the demand. The countries, which include Australia, Brazil, Canada and India, were chosen due to their "elevated cyberthreat risk."Read more of this story at Slashdot.

Australia's record-breaking wildfires of 2019 and 2020 blasted smoke so high that even the ozone layer in the stratosphere was damaged, a new analysis shows. Hmmmmmm shares a report: The Black Summer bushfires, which raged along Australia's east coast from November 2019 to January 2020, caused unprecedented destruction. The fires burned more than 70,000 square kilometres of bushland, destroyed more than 3000 homes, and killed more than 30 people and billions of animals. Smoke billowed all the way to South America and triggered distant ocean algal blooms. Now, Peter Bernath at Old Dominion University in Virginia and his colleagues have shown that the smoke also pushed its way up into the stratosphere and triggered chemical reactions that destroyed ozone. They analysed data from the Atmospheric Chemistry Experiment satellite, which monitors levels of 44 different molecules in the atmosphere. This revealed that stratospheric ozone declined by 13 per cent in the middle latitude area of the southern hemisphere -- which includes Australia -- in the aftermath of the Black Summer fires.Read more of this story at Slashdot.

Microsoft has announced an update to its translation services that, thanks to new machine learning techniques, promises significantly improved translations between a large number of language pairs. TechCrunch reports: Based on its Project Z-Code, which uses a "spare Mixture of Experts" approach, these new models now often score between 3% and 15% better than the company's previous models during blind evaluations. Z-Code is part of Microsoft's wider XYZ-Code initiative that looks at combining models for text, vision and audio across multiple languages to create more powerful and helpful AI systems. "Mixture of Experts" isn't a completely new technique, but it's especially useful in the context of translation. At its core, the system basically breaks down tasks into multiple subtasks and then delegates them to smaller, more specialized models called "experts." The model then decides which task to delegate to which expert, based on its own predictions. Greatly simplified, you can think of it as a model that includes multiple more specialized models.Read more of this story at Slashdot.

The U.S. Supreme Court's decision this month in FBI v. Fazaga, a case challenging FBI surveillance, will make it significantly harder for people to pursue surveillance cases, and for U.S. and European Union (EU) negotiators to secure a lasting agreement for transatlantic transfers of private data. The Hill reports: The justices gave the U.S. government more latitude to invoke "state secrets" in spying cases. But ironically, that victory undercuts the Biden administration's efforts to show that the United States has sufficiently strong privacy protections to sustain a new Privacy Shield agreement -- unless Congress steps in now. In July 2020, the EU Court of Justice (CJEU) struck down the EU-U.S. Privacy Shield, a legal framework used by thousands of U.S. companies to facilitate data transfers, because the U.S. failed to provide adequate protection for data belonging to people from the EU. Specifically, the court found that U.S. surveillance authorities, including Section 702 of the Foreign Intelligence Surveillance Act (FISA) and Executive Order 12333, permit unjustifiably broad government surveillance. The court also found that the Privacy Shield failed to provide adequate redress mechanisms for Europeans whose data is transferred to the U.S. -- namely, the ability to be heard by an independent court that can order binding remedies. In striking down Privacy Shield, the CJEU was clear: no EU-U.S. data-transfer agreement will survive the court's scrutiny until the U.S. narrows the scope of its surveillance and ensures that individuals subject to potentially illegal surveillance have a real, meaningful way to pursue accountability.Read more of this story at Slashdot.

New submitter hawk writes: Government agencies would no longer be able to indefinitely conceal their secret seizure of email records under legislation introduced Tuesday that takes aim at gag orders. The Government Surveillance Transparency Act, sponsored by a bipartisan group of lawmakers from both chambers, puts limitations on gag orders that seek to block tech companies from altering users whose data has been seized. It targets a practice brought into the spotlight after journalists from CNN, The New York Times and The Washington Post all had their records seized by the Department of Justice (DOJ). The bill requires law enforcement agencies to notify surveillance subjects that their email, location and web browsing data has been seized, aligning with current practices for phone records and bank data. While the legislation allows the government to continue getting secret warrants to obtain such data, it also places a six-month limit on gag orders that prevent companies from notifying their users of the seizure. "When the government obtains someone's emails or other digital information, users have a right to know," Sen. Ron Wyden (D-Ore.) said in a release.Read more of this story at Slashdot.

YouTube is the latest company to offer free shows TV with ads. The video giant says you'll now be able to stream nearly 4,000 episodes of TV for free, as long as you're also willing to watch ads during the show. From a report: Shows available include Hell's Kitchen, Andromeda, and Heartland, and you'll be able to watch them in the US on the web, mobile devices, and "most connected TVs via the YouTube TV app," YouTube says in a blog post. With the new free TV shows, YouTube is taking on a number of major competitors. One is over-the-air television -- by offering free TV on demand, YouTube is likely hoping that you'll see what's available on its platform instead of channel surfing to see what else might be on. And there are already many options for streaming ad-supported TV for free, including Tubi, Xumo, Plex, Roku, and offerings from Vizio, and Samsung -- just to name a few -- so YouTube is late to the game.Read more of this story at Slashdot.

Abnormally hot air has hit both of the world's poles at once, while the extent of Arctic sea ice appears to have been historically low this winter. From a report: Temperature records were broken in Antarctica as warm air swept unusually far into the heart of the continent. Concordia station, which is high above sea level and has an annual average temperature of -50C, reached an all-time high of -12.2C on 18 March, beating the -13.7C record set in December 2016. Another research station, Vostok, also saw record high temperatures. "The Antarctic [heat] is really extreme. I haven't seen anything like that. Colleagues haven't seen anything this extreme," says Walt Meier at the US National Snow and Ice Data Center (NSIDC) in Boulder, Colorado. A band of westerly winds around Antarctica usually isolates the continent from other weather systems. But in the past week, an "atmospheric river" of hot air, originating in the mid-latitudes, travelled down from Tasmania and South Australia, breaching those winds to travel far across the ice, says John Turner at the British Antarctic Survey. Although such events aren't unprecedented, the temperatures this time are very high. Turner says while it is undoubtedly an "extreme event," he thinks the Antarctic heat looks like natural variability rather than climate change. Past research by Turner has found no discernible trend in extreme temperatures in Antarctica, where the hole in the ozone layer appears to have cancelled out the impact of global warming so far. The recent highs won't have any consequences such as impacts on landing strips for scientists stationed on the continent either, says Ted Scambos at the University of Colorado, Boulder, because most have already departed ahead of the Antarctic winter and those remaining are hunkered down with supplies. The record temperatures come shortly after Antarctic sea ice declined to a record low minimum extent, at 1.92 million square kilometres on 25 February. "It was quite a lot lower than anything else in the 40-plus year record," says Scambos.Read more of this story at Slashdot.

Firefox is finally gaining proper AV1 support. Neowin reports: According to an update made to a post on Bugzilla, the Mozilla Foundation is finally ready to add hardware acceleration for the AV1 video format. Developers plan to implement improved AV1 support in the upcoming release of Firefox 100, scheduled to arrive on May 3, 2022. Hardware acceleration for AV1 video brings several noticeable benefits to customers. The standard developed by Alliance for Open Media and initially released in March 2018 offers better video compression than H.264 (about 50%) and VP9 (about 20%). Shifting AV1 video processing from software to hardware improves efficiency and reduces energy consumption, resulting in better battery life on tablets and laptops. Google and Microsoft announced hardware-accelerated AV1 video in Chrome and Edge in late 2020. Mozilla, on the other hand, did not rush to introduce improved AV1 support in Firefox. While it is easy to dunk on Firefox, there is a reason why developers took their time. Hardware-accelerated AV1 video is not something you can add to any computer with Windows 10, and it requires a PC with the most recent and powerful hardware.Read more of this story at Slashdot.

An anonymous reader shares a report: A digital extortion gang with a murky background and unconventional methods -- one researcher called them "laughably bad" at times -- has claimed responsibility for a string of compromises against some of the world's largest technology companies. The group, known as Lapsus$, said in a series of public posts on the messaging app Telegram this week that it had accessed Okta, the San Francisco-based identity-management firm that provides authentication tools for an array of business clients. Okta said Tuesday that attackers may have viewed data from approximately 2.5% of its customers after breaching the laptop of an engineer at a third-party vendor. Lapsus$ previously claimed to breach organizations including Nvidia, Samsung Electronics, and the gaming company Ubisoft Entertainment. The group said it also accessed data from Microsoft, saying it had gathered source code from the company's Bing search engine, Bing Maps and the Cortana digital assistant. Microsoft said attackers gained "limited access" to its systems, and that attackers had compromised a single account to gather data. In recent years, most hacking groups have used malware to encrypt a victim's files, then demanded payment to unlock them, so-called ransomware. Sometimes the groups steal sensitive data and threaten to make it public unless they are paid. Lapsus$ functions as a "large-scale social engineering and extortion campaign," though it does not deploy ransomware, Microsoft said. The group uses phone-based tactics to target personal email accounts at victim organizations and pays individual employees or business partners of an organization for illicit access, according to Microsoft. Lapsus$ also is known for hijacking individual accounts at cryptocurrency exchanges to drain user holdings.Read more of this story at Slashdot.

Kenya's great lakes are flooding, in a devastating and long-ignored environmental disaster that is displacing hundreds of thousands of people. From a report: One of the first scientists to realise that something was wrong with the lakes was a geologist named Simon Onywere. He came to the topic by accident. Between 2010 and 2013 he had been studying Lake Baringo, Kenya's fourth-largest lake by volume. The bones of residents of the area around the lake weaken uncommonly fast, and Onywere was investigating whether this may be linked to high fluoride levels in the water. Then, in early 2013, while he was meeting with residents of Marigat, a town near the lake, one old man stood up. "Prof," he said. "We don't care about the fluoride. What we want to know is how the water has entered our schools." Curious to know what the man was talking about, Onywere visited the local Salabani primary school. There, he found the lake lapping through the grounds of the school. Nonplussed, he took out his map. He looked at the location of the lake and the location of the school, and wondered how the lake had moved 2km without it becoming news. Onywere rushed back to Nairobi, where he and his colleagues at several Kenyan universities studied recent satellite images of the lake. The images showed that the lake had, in the past year, flooded the area around it. Then Onywere searched for images of some of the lakes nearby: Lakes Bogoria, Naivasha and Nakuru. All of these had flooded. As he extended his search, he saw that Lake Victoria, Africa's largest lake, had flooded, too. So had Lake Turkana, the largest desert lake in the world.Read more of this story at Slashdot.

A new report has found that Facebook failed to detect blatant hate speech and calls to violence against Myanmar's Rohingya Muslim minority years after such behavior was found to have played a determining role in the genocide against them. From a report: The report shared exclusively with The Associated Press showed the rights group Global Witness submitted eight paid ads for approval to Facebook, each including different versions of hate speech against Rohingya. All eight ads were approved by Facebook to be published. The group pulled the ads before they were posted or paid for, but the results confirmed that despite its promises to do better, Facebook's leaky controls still fail to detect hate speech and calls for violence on its platform. The army conducted what it called a clearance campaign in western Myanmar's Rakhine state in 2017 after an attack by a Rohingya insurgent group. More than 700,000 Rohingya fled into neighboring Bangladesh and security forces were accused of mass rapes, killings and torching thousands of homes. On Feb. 1 of last year, Myanmar's military forcibly took control of the country, jailing democratically elected government officials. Rohingya refugees have condemned the military takeover and said it makes them more afraid to return to Myanmar. Experts say such ads have continued to appear and that despite its promises to do better and assurances that it has taken its role in the genocide seriously, Facebook still fails even the simplest of tests -- ensuring that paid ads that run on its site do not contain hate speech calling for the killing of Rohingya Muslims.Read more of this story at Slashdot.

Roku device owners will soon have a whole host of new personalization features, including all-new Photo Streams, with the Roku OS 11. From a report: Firstly, when Roku OS 11 rolls out to users in the weeks ahead, they'll be able to change their screensaver to display their own photography or images with Photo Streams. Not only will Photo Streams allow users to display photos from their desktop or mobile device on Roku, but users will also be able to share Streams with other Roku device owners as well. Once a Stream is shared, other Roku owners will be able to add to it, allowing everyone to collaborate on a shared album. Roku OS 11 will also introduce a new "what to watch on Roku" menu, a personally curated hub added to the home screen menu that will suggest popular and recently released TV and movies.Read more of this story at Slashdot.

Google's Messages and Dialer apps for Android devices have been collecting and sending data to Google without specific notice and consent, and without offering the opportunity to opt-out, potentially in violation of Europe's data protection law. From a report: According to a research paper, "What Data Do The Google Dialer and Messages Apps On Android Send to Google?" [PDF], by Trinity College Dublin computer science professor Douglas Leith, Google Messages (for text messaging) and Google Dialer (for phone calls) have been sending data about user communications to the Google Play Services Clearcut logger service and to Google's Firebase Analytics service. "The data sent by Google Messages includes a hash of the message text, allowing linking of sender and receiver in a message exchange," the paper says. "The data sent by Google Dialer includes the call time and duration, again allowing linking of the two handsets engaged in a phone call. Phone numbers are also sent to Google." The timing and duration of other user interactions with these apps has also been transmitted to Google. And Google offers no way to opt-out of this data collection. [...] Both pre-installed versions of these apps, the paper observes, lack app-specific privacy policies that explain what data gets collected -- something Google requires from third-party developers. And when a request was made through Google Takeout for the Google Account data associated with the apps used for testing, the data Google provided did not include the telemetry data observed.Read more of this story at Slashdot.

Limiters cap amount of electricity households can use, making many appliances unusable. From a report: Josie Gagne was stumbling in the dark, sobbing while on the phone with an Enmax customer assistant, as she tried to locate the tiny orange button under the utility meter that would restore heat inside. It was the shock that got her. The young single mother with two kids under two returned home one winter day last year to find a note on her door from Enmax. She'd fallen behind on bills; the home was now on a limiter, capping her electricity. The furnace was off and at that point, she had no idea what a limiter even was. "I'm freaking out. I'm crying, thinking 'What am I going to do?'" she said. "It's the middle of winter, it's still cold outside. How am I going to feed my children when my oven doesn't work?" Rising utility bills have community advocates worried the number of Calgarians facing this scenario will increase, and many don't know what a load limiter is. It's often the first step before disconnection. Several Calgary residents flagged the issue while sharing their utility bill experiences with CBC Calgary through text messaging, and on Calgary Kindness, a mutual aid Facebook group. They've shared their personal stories with CBC journalists so others know what to expect. Contributors said they were scared their fridge would lose power and their groceries would rot. They relied on air fryers, barbecues or a hot plate to make it through. The extra fees -- $52 for the notice, $52 to remove the limiter -- only made it worse. Plus, the black mark on their files means they often can't get a contract with more favourable fixed rates. When the device is installed, a stove or anything else requiring 240 volts of electricity won't work.Read more of this story at Slashdot.

sciencehabit writes: In its final stages, the neurological disease amyotrophic lateral sclerosis (ALS) can bring extreme isolation. People lose control of their muscles, and communication may become impossible. But with the help of an implanted device that reads his brain signals, a man in this "complete" locked-in state could select letters and form sentences, researchers report this week. "People have really doubted whether this was even feasible," says Mariska Vansteensel, a brain-computer interface researcher at the University Medical Center Utrecht who was not involved in the study, published in Nature Communications. If the new spelling system proves reliable for all people who are completely locked in -- and if it can be made more efficient and affordable -- it might allow thousands of people to reconnect to their families and care teams, says Reinhold Scherer, a neural engineer at the University of Essex.Read more of this story at Slashdot.

As Blue Origin nears the critical point of delivering flight-ready BE-4 rocket engines to United Launch Alliance, the engineer in charge of the company's rocket engine program has decided to leave. ArsTechnica reports: Blue Origin CEO Bob Smith recently informed employees of the departure of John Vilja, the senior vice president of Blue Engines. In Smith's email to employees, obtained by Ars, Vilja is said to be leaving Blue to pursue his "many" interests and hobbies outside of work. "During his time at Blue, John led the team to support eight New Shepard missions powered by BE-3PM engines, countless hot fire tests, and made progress on multiple engines development programs," Smith wrote. "He also built a world-class Engines team, recruiting some of the best talent in the business." Sources familiar with Vilja's work confirmed that he was a good manager and engineer who helped get the BE-4 rocket engine program back on track. As Ars reported last August, before Vilja's arrival, the numerous challenges faced by the engineers and technicians working to build and test BE-4 development engines included being "hardware poor."Read more of this story at Slashdot.

In a formalization of an earlier Twitter-led push to try to exert influence over fast-forming European digital regulations, the social media firm has used its Twitter Spaces platform to host the official kick off of a policy advocacy lobby group that's being branded the Open Internet Alliance (OIA). From a report: Alongside Twitter, video streaming platform Vimeo; Automattic, the company behind WordPress.com, WooCommerce and Tumblr; the Czech and Slovak focused search engine company, Seznam; and Jodel, a Berlin-based (profile-less) social network, are named as founding members. Twitter said the establishment of this formal lobbying alliance has been some two years in the making. Notably Mozilla -- which had joined Twitter, Auttomatic and Vimeo in a earlier call for incoming EU digital regulations to support better user controls to tackle bad speech rather than hone in on content censorship -- is not being named as a founding member so appears to be sitting this one out. At the time of writing it's unclear why Mozilla is missing. But the Alliance is putting out a wider call for other "middle-layer" Internet companies to join the initiative -- so the grouping may grow in size. Albeit -- very clearly -- big tech need not apply. Speaking during a Twitter Spaces event today to discuss the formation of the alliance, Sinead McSweeney, Twitter's global policy VP, said the group is making a plea to lawmakers to think about the wider web ecosystem -- rather than see the Internet as "a monolith" comprised of just a handful of tech giants. "Our plea in aid of the open Internet is that [lawmakers] not view the Internet as a monolith, nor indeed view it as fixing the Internet solving all of societies problems," she said, urging policymakers to: "Take a wider focus when they're looking at solutions -- not look at the Internet just through the lens of a handful of companies. And really think about the entire ecosystem -- and get away from this sense 'oh big tech is the problem.' Because -- in actual fact, in their efforts to tackle so called 'big tech -- that is all we may end up with."Read more of this story at Slashdot.

An anonymous reader shares a report: Non-fungible tokens have risen in interest and value over the last year, with Bored Ape Yacht Club among the most popular and valuable collections. Here's what one of the Ethereum co-founders had to say about the Bored Ape Yacht Club. The rise of NFTs has led to a rise in Ethereum's price and use cases. Ethereum co-founder Vitalik Buterin was interviewed by TIME in a cover story, labeling him the "Prince of Crypto." In the interview, Buterin said there are increasing dangers with cryptocurrencies, including overeager investors and soaring transaction fees. "Crypto itself has a lot of dystopian potential if implemented wrong," Buterin said. The Ethereum co-founder went on to take an apparent shot at Bored Ape Yacht Club, an NFT collection that was minted on the Ethereum blockchain in April 2021. "The peril is you have these $3 million monkeys, and it becomes a different kind of gambling." Buterin said a lot of people are buying yachts and lambos, but he hopes that in the future crypto is used for fair voting systems, urban planning and universal basic income. "If we don't exercise our voice, the only things that get built are the things that are immediately profitable." Buterin, who has openly supported Ukraine during the invasion of the country by neighbor Russia, highlighted the amount of money raised for the country through crypto, while once again mentioning Bored Apes. "One silver lining of the situation in the last three weeks is that is has reminded a lot of people in the crypto space that ultimately the goal of crypto is not to play games with million-dollar pictures of monkeys, it's to do things that accomplish meaningful effects in the real world," Buterin said in an email to TIME on Mar. 14, 2022.Read more of this story at Slashdot.

An anonymous reader shares a report: This may feel like deja vu because Google itself mistakenly leaked this announcement a few days ago, but the company today officially announced the launch of Steam OS on Chrome OS. Before you run off to install it, there are a few caveats: This is still an alpha release and only available on the more experimental and unstable Chrome OS Dev channel. The number of supported devices is also still limited since it'll need at least 8GB of memory, an 11th-generation Intel Core i5 or i7 processor and Intel Iris Xe Graphics. That's a relatively high-end configuration for what are generally meant to be highly affordable devices and somewhat ironically means that you can now play games on Chrome OS devices that are mostly meant for business users. The list of supported games is also still limited but includes the likes of Portal 2, Skyrim, The Witcher 3: Wild Hunt, Half-Life 2, Stardew Valley, Factorio, Stellaris, Civilization V, Fallout 4, Dico Elysium and Untitled Goose Game.Read more of this story at Slashdot.

After much speculation, Nvidia today at its March 2022 GTC event announced the Hopper GPU architecture, a line of graphics cards that the company says will accelerate the types of algorithms commonly used in data science. Named for Grace Hopper, the pioneering U.S. computer scientist, the new architecture succeeds Nvidia's Ampere architecture, with launched roughly two years ago. From a report: The first card in the Hopper lineup is the H100, containing 80 billion transistors and a component called the Transformer Engine that's designed to speed up specific categories of AI models. Another architectural highlight includes Nvidia's MIG technology, which allows an H100 to be partitioned into seven smaller, isolated instances to handle different types of jobs. "Datacenters are becoming AI factories -- processing and refining mountains of data to produce intelligence," Nvidia founder and CEO Jensen Huang said in a press release. "Nvidia H100 is the engine of the world's AI infrastructure that enterprises use to accelerate their AI-driven businesses." The H100 is the first Nvidia GPU to feature dynamic programming instructions (DPX), "instructions" in this context referring to segments of code containing steps that need to be executed. Developed in the 1950s, dynamic programming is an approach to solving problems using two key techniques: recursion and memoization. Recursion in dynamic programming involves breaking a problem down into sub-problems, ideally saving time and computational effort. In memoization, the answers to these sub-problems are stored so that the sub-problems don't need to be recomputed when they're needed later on in the main problem. Dynamic programming is used to find optimal routes for moving machines (e.g., robots), streamline operations on sets of databases, align unique DNA sequences, and more.Read more of this story at Slashdot.

More adolescents failed to quit smoking in 2020 than in any of the previous 13 years, according to new data published in the Journal of the American Medical Association. 2020 was the first year the research team had data on attempts to quit e-cigarettes, and it showed that around 4 percent of adolescents unsuccessfully attempted to quit e-cigarettes. From a report: E-cigarettes have been pushed to adult smokers as an alternative to traditional, combustible cigarettes -- some evidence shows they might be less dangerous, and there's mixed evidence that they could push adults to quit smoking altogether. But the picture might be different for teens, who started vaping in droves in 2018 and are far less likely to be cigarette smokers first. The new analysis shows that for younger people, the introduction of e-cigarettes made quitting more difficult. The new study includes data from the Monitoring the Future study, which surveys eighth, 10th, and 12th grade students. It includes a question asking the participants if they had ever tried to stop smoking and found that they could not. In 2020, it added a question asking if they'd ever tried to stop vaping nicotine and found that they could not. From 1997 to 2019, the survey found that the number of students who reported using cigarettes and the percent of adolescents estimated to have tried and failed to quit smoking both dropped.Read more of this story at Slashdot.

Authentication services provider Okta is investigating a report of a digital breach, the company said on Tuesday, after hackers posted screenshots showing what they claimed was its internal company environment. From a report: A hack at Okta could have major consequences because thousands of other companies rely on the San Francisco-based firm to manage access to their own networks and applications. The company was aware of the reports and was investigating, Okta official Chris Hollis said in a brief statement. "We will provide updates as more information becomes available," he added. The screenshots were posted by a group of ransom-seeking hackers known as LAPSUS$ on their Telegram channel late on Monday. In an accompanying message, the group said its focus was "ONLY on Okta customers." TechCrunch adds: Okta chief executive Todd McKinnon confirmed the breach in a tweet thread overnight on March 22: "In late January 2022, Okta detected an attempt to compromise the account of a third party customer support engineer working for one of our subprocessors. The matter was investigated and contained by the subprocessor. We believe the screenshots shared online are connected to this January event. Based on our investigation to date, there is no evidence of ongoing malicious activity beyond the activity detected in January."Read more of this story at Slashdot.

An anonymous reader quotes a report from The Verge: District of Columbia Attorney General Karl Racine is suing Grubhub for deceptive business practices, saying its food delivery app covertly inflates prices for diners who order through it. The suit demands an end to a laundry list of allegedly illegal practices as well as financial restitution and civil penalties. The newly filed lawsuit (PDF) argues that Grubhub's promises of "free" online orders -- and "unlimited free delivery" for Grubhub Plus -- are misleading. While customers can make pickup orders for free, the company charges delivery and service fees for standard orders and service fees for Grubhub Plus orders, displaying the service fee until recently as part of a single line with sales taxes. "Grubhub misled District residents and took advantage of local restaurants to boost its own profits, even as District consumers and small businesses struggled during the COVID-19 pandemic," said Racine in a statement. "Grubhub charged hidden fees and used bait-and-switch advertising tactics -- which are illegal." The complaint says Grubhub orders often cost more than ordering the same item at a restaurant and argues that the company fails to reasonably disclose this to consumers. "Because Grubhub already charges consumers several different types of fees for its services ... consumers expect that the menu prices listed on Grubhub are the same prices offered at the restaurant or on the restaurant's website," it says. Grubhub has also listed many restaurants without their permission to expand its service, routing orders through its services and taking a commission. The complaint says it listed "over a thousand" restaurants in DC that had no connection with the company, asserting that the unapproved listings often contained menu errors and resulted in orders that would "take longer to fill, would be filled incorrectly, would be delivered cold, or would eventually be cancelled altogether." Grubhub -- which also operates Seamless and several other food delivery apps -- has made more elaborate attempts to insert itself into restaurant transactions as well. The lawsuit notes its launch of unsanctioned microsites that appear to be official restaurant sites, as well as custom phone numbers that let it charge fees when customers call restaurants, even when the calls didn't result in orders. The company also offered a "Supper for Support" promotion that required restaurants to foot the bill for a special discount; it offered restaurants $250 in compensation after a backlash. "During the past year, we've sought to engage in a constructive dialogue with the DC attorney general's office to help them understand our business and to see if there were any areas for improvement," said Katie Norris, director of corporate communications, in a statement. "We are disappointed they have moved forward with this lawsuit because our practices have always complied with DC law, and in any event, many of the practices at issue have been discontinued. We will aggressively defend our business in court and look forward to continuing to serve DC restaurants and diners." According to The Verge, Grubhub "says the app no longer lists restaurants that haven't agreed to work with it, and it's retired its microsites and the Supper for Support program." It will also make it more clear to users that prices might be lower when ordering directly from the restaurant, "and it will specify in marketing that only pickup orders are free," adds The Verge. The company maintains that it "has not misrepresented its fees," however.Read more of this story at Slashdot.

Despite being easily removable since it is not soldered down, the Mac Studio's SSD storage is not currently user-upgradeable due to a software block, YouTuber Luke Miani has discovered. MacRumors reports: Initial teardowns suggested that the Mac Studio's storage could be upgradeable since it is not soldered in place. Each Mac Studio contains two internal SSD slots, and the SSDs themselves can be freely swapped between the connectors. In a video on his YouTube channel, Miani tested if the Mac Studio's storage is user upgradeable in practice. Miani wiped the SSD of a Mac Studio, removed it from the machine, and inserted it into an empty SSD slot in another Mac Studio, but the Mac's status light blinked SOS and would not boot. The Mac Studio recognizes the SSD, but Apple's software prevents it from booting, suggesting that this is a conscious decision by Apple to prevent users from upgrading their storage themselves. On its website, Apple claims that the Mac Studio's SSD storage is "not user accessible" and encourages users to configure the device with enough storage at the point of purchase. It now seems that the purpose of the easily replaceable storage is to aid repairs performed by authorized technicians, who likely will have software tools that enable the Mac Studio to boot from different internal storage. Since the prevention of user-upgradeability appears to simply be due to a software block, Apple could enable users to upgrade their own storage in the future via an update.Read more of this story at Slashdot.

NASA JPL announced a cosmic milestone with the confirmed discovery of over 5,000 exoplanets (planets located outside our solar system). CNET reports: A new batch of 65 planets joined the NASA Exoplanet Archive on Monday, triggering a celebratory mood. "It's not just a number," Exoplanet Archive science lead Jessie Christiansen said in a statement. "Each one of them is a new world, a brand new planet. I get excited about every one because we don't know anything about them." The first exoplanets were confirmed in the early 1990s, which means we've set an impressive pace for discovery. NASA announced the planet count had hit 4,000 in June 2019 and it took less than three years to add another thousand to that haul. [...] We haven't definitively found an Earth clone yet, but the exoplanets spotted so far range from rocky worlds like ours to jumbo gas giants bigger than Jupiter. While 5,000 is an impressive number, it's just a tiny sliver of what's out there. Said NASA, "We do know this: Our galaxy likely holds hundreds of billions of such planets."Read more of this story at Slashdot.

According to OpenAI CEO and former president of Y Combinator, Sam Altman, college education in the U.S. "is nearer to collapsing than it appears." He writes in a Twitter thread: Most of all, it's clearly a bad deal for many students, or we wouldn't have the student debt crisis. Cancelling student debt is good if it's tied to fixing the problem going forward, which means not offering it, or having the colleges be the guarantor, or ISAs, or something. But cancelling all student debt and then continuing to issue new debt to students that the university fails (i.e. by not putting them in a position to make enough money to easily pay it back) doesn't make sense. Tech jobs (I assume other jobs will follow) are increasingly willing to hire with no degree if an applicant can do well in an interview/on a test. It seems very clear that elite colleges discriminate against Asian-American students, and that the Supreme Court is going to find this. (One expert said no discrimination would result in around 65% Asian-American admits.) The fact that this has been so tolerated speaks volumes. Stopping standardized tests -- which are imperfect and correlated with socioeconomic status -- seems to be bad. Other items like the personal essay are surely more correlated and more hackable. I'm all for looking at test scores in context, but dropping entirely denies opportunity. (I wonder if this is correlated to the earthquake coming when colleges can no longer discriminate against Asian-American students.) Monocultures suck. It's hard to know how many of the stories about ridiculous stuff happening on campuses to believe, but even if a small fraction of them are true, these are clearly no longer places hyperfocused on learning. (A personal anecdote: I was invited a few years ago to speak at a college but I was asked to give a 'privilege disclaimer', essentially stating that if I didn't look like I did I wouldn't have been able to succeed... Although I understand the spirit and obviously I am privileged, I consulted with friends from different backgrounds and then declined: what kind of message does that send to listeners?) The list could go on for a long time, but the point is: What a time to start an alternative to college! The world really needs it.Read more of this story at Slashdot.

sciencehabit shares a report from Science.org: A California company says it can decipher almost all the DNA code of a days-old embryo created through in vitro fertilization (IVF) -- a challenging feat because of the tiny volume of genetic material available for analysis. The advance depends on fully sequencing both parents' DNA and "reconstructing" an embryo's genome with the help of those data. And the company suggests it could make it possible to forecast risk for common diseases that develop decades down the line. Currently, such genetic risk prediction is being tested in adults, and sometimes offered clinically. The idea of applying it to IVF embryos has generated intense scientific and ethical controversy. But that hasn't stopped the technology from galloping ahead. Predicting a person's chance of a specific illness by blending this genetic variability into what's called a "polygenic risk score" remains under study in adults, in part because our understanding of how gene variants come together to drive or protect against disease remains a work in progress. In embryos it's even harder to prove a risk score's accuracy, researchers say. The new work on polygenic risk scores for IVF embryos is "exploratory research," says Premal Shah, CEO of MyOme, the company reporting the results. Today in Nature Medicine, the MyOme team, led by company co-founders and scientists Matthew Rabinowitz and Akash Kumar, along with colleagues elsewhere, describe creating such scores by first sequencing the genomes of 10 pairs of parents who had already undergone IVF and had babies. The researchers then used data collected during the IVF process: The couples' embryos, 110 in all, had undergone limited genetic testing at that time, a sort of spot sequencing of cells, called microarray measurements. Such analysis can test for an abnormal number of chromosomes, certain genetic diseases, and rearrangements of large chunks of DNA, and it has become an increasingly common part of IVF treatment in the United States. By combining these patchy embryo data with the more complete parental genome sequences, and applying statistical and population genomics techniques, the researchers could account for the gene shuffling that occurs during reproduction and calculate which chromosomes each parent had passed down to each embryo. In this way, they could predict much of that embryo's DNA. The researchers had a handy way to see whether their reconstruction was accurate: Check the couples' babies. They collected cheek swab samples from the babies and sequenced their full genome, just as they'd done with the parents. They then compared that "true sequence" with the reconstructed genome for the embryo from which the child originated. The comparison revealed, essentially, a match: For a 3-day-old embryo, at least 96% of the reconstructed genome aligned with the inherited gene variants in the corresponding baby; for a 5-day-old embryo, it was at least 98%. (Because much of the human genome is the same across all people, the researchers focused on the DNA variability that made the parents, and their babies, unique.) Once they had reconstructed embryo genomes in hand, the researchers turned to published data from large genomic studies of adults with or without common chronic diseases and the polygenic risk score models that were derived from that information. Then, MyOme applied those models to the embryos, crunching polygenic risk scores for 12 diseases, including breast cancer, coronary artery disease, and type 2 diabetes. The team also experimented with combining the reconstructed embryo sequence of single genes, such as BRCA1 and BRCA2, that are known to dramatically raise risk of certain diseases, with an embryo's polygenic risk scores for that condition -- in this case, breast cancer.Read more of this story at Slashdot.

apoc.famine shares a report from Ars Technica: Hundreds of thousands of sites use the OAuth protocol to let visitors login using their existing accounts with companies like Google, Facebook, or Apple. Instead of having to create an account on the new site, visitors can use an account that they already have -- and the magic of OAuth does the rest. The Browser-in-the-Browser (BitB) technique capitalizes on this scheme. Instead of opening a genuine second browser window that's connected to the site facilitating the login or payment, BitB uses a series of HTML and cascading style sheets (CSS) tricks to convincingly spoof the second window. The URL that appears there can show a valid address, complete with a padlock and HTTPS prefix. The layout and behavior of the window appear identical to the real thing. While the method is convincing, it has a few weaknesses that should give savvy visitors a foolproof way to detect that something is amiss. Genuine OAuth or payment windows are in fact separate browser instances that are distinct from the primary page. That means a user can resize them and move them anywhere on the monitor, including outside the primary window. BitB windows, by contrast, aren't a separate browser instance at all. Instead, they're images rendered by custom HTML and CSS and contained in the primary window. That means the fake pages can't be resized, fully maximized or dragged outside the primary window. All users should protect their accounts with two-factor authentication. One other thing more experienced users can do is right click on the popup page and choose "inspect." If the window is a BitB spawn, its URL will be hardcoded into the HTML.Read more of this story at Slashdot.

New submitter Dru Nemeton shares a report from 9to5Mac: Apple's new Studio Display officially hit the market on Friday, and we continue to learn new tidbits about what exactly's inside the machine. While Apple touted that the Studio Display is powered by an A13 Bionic inside, we've since learned that the Studio Display also features 64GB of onboard storage, because who knows why... [...] as first spotted by Khaos Tian on Twitter, the Studio Display also apparently features 64GB of onboard storage. Yes, 64GB: double the storage in the entry-level Apple TV 4K and the same amount of storage in the entry-level iPad Air 5. Also worth noting: the Apple TV 4K is powered by the A12 Bionic chip, so the Studio Display has it beat on that front as well. Apple hasnâ(TM)t offered any explanation for why the Studio Display features 64GB of onboard storage. It appears that less than 2GB of that storage is actually being used as of right now. One unexciting possibility is that the A13 Bionic chip used inside the Studio Display is literally the exact same A13 Bionic chip that was first shipped in the iPhone 11. As you might remember, the iPhone 11 came with 64GB of storage in its entry-level configuration, meaning Apple likely produced millions of A13 Bionic chips with 64GB of onboard storage. What do you think? Will Apple ever tap into the A13 Bionic chip and 64GB storage inside the Studio Display for something more interesting?Read more of this story at Slashdot.

An anonymous reader quotes a report from Slate.com: On March 1, after a week of horror in Ukraine, reports came out that Russia's censorship office had threatened to block Russian Wikipedia. A 32-year-old who asked to be called Alexander soon made a plan to download a local copy of Russian-language Wikipedia to keep with him in eastern Russia. "I did it just in case," he told me over Instagram Messenger before sharing that he and his wife are "working on moving to another country" with their two dogs, Prime and Shaggy. (Instagram has been blocked in Russia, but many continue to access it using virtual private networks. On Monday, the Russian government officially declared Facebook and Instagram "extremist organizations.") Alexander wasn't the only Russian citizen to make a local copy of Wikipedia. Data suggests that after the threats of censorship, Russians started torrenting Wikipedia in droves. Currently, Russia is the country with the most Wikipedia downloads—by a landslide. Before the invasion, it rarely broke the top 10, but after the Feb. 24 invasion of Ukraine, it has kept a solid hold on first place. The 29-gigabyte file that contains a downloadable Russian-language Wikipedia was downloaded a whopping 105,889 times during the first half of March, which is a more than 4,000 percent increase compared with the first half of January. According to Stephane Coillet-Matillon, who leads Kiwix, the organization that facilitates these downloads, Russian downloads now constitute 42 percent of all traffic on Kiwix servers, up from just 2 percent in 2021. "We had something similar back in 2017 when Turkey blocked Wikipedia," he said, "but this one is just another dimension." "Wikipedia routinely makes a dump of its databases available publicly, which Kiwix compresses into an archive so it can be more easily shared," adds Slate. "The entirety of English Wikipedia, from 'List of Informally Named Dinosaurs' to 'Floor' to 'Skunks as Pets' and everything in between, is 87 GB with pictures or 47 GB without. Russian-language Wikipedia is even smaller, continuing 1.8 million articles compared with English Wikipedia's 6.4 million."Read more of this story at Slashdot.

A judge on Brazil's Supreme Court has reversed a ban on Telegram, two days after blocking the messaging app for ignoring orders. Engadget reports: Telegram CEO Pavel Durov said the company missed the court's emails. "We complied with an earlier court decision in late February and responded with a suggestion to send future takedown requests to a dedicated email address," Durov wrote on Telegram on Friday. "Unfortunately, our response must have been lost, because the Court used the old general-purpose email address in further attempts to reach us. As a result, we missed its decision in early March that contained a follow-up takedown request. Luckily, we have now found and processed it, delivering another report to the Court today." Durov added that Telegram will appoint a representative in Brazil and set up a framework so it can address requests more promptly. According to The New York Times, Telegram complied with the court's demands by taking down classified information posted on President Jair Bolsonaro's channel and deleting the accounts of a Bolsonaro supporter who was allegedly spreading misinformation. The court then reversed the ban. Telegram reacted so swiftly that the ban (which was imposed by a judge who is running multiple investigations into Bolsonaro and his allies for spreading misinformation) was never actually in effect. The court order gave Apple, Google, ISPs and phone providers five days to block the app. Telegram will also "start promoting verified information and labeling posts containing falsehoods," adds Engadget. "It will also monitor the 100 most popular channels in the country," which account for 95 percent of views of public posts.Read more of this story at Slashdot.

Microsoft says they are investigating claims that the Lapsus$ data extortion hacking group breached their internal Azure DevOps source code repositories and stolen data. BleepingComputer reports: Unlike many extortion groups we read about today, Lapsus$ does not deploy ransomware on their victim's devices. Instead, they target the source code repositories for large companies, steal their proprietary data, and then attempt to ransom that data back to the company for millions of dollars. While it is not known if the extortion group has successfully ransomed stolen data, Lapsus has gained notoriety over the past months for their confirmed attacks against NVIDIA, Samsung, Vodafone, Ubisoft, and Mercado Libre. Unfortunately, Lapsus$ has a good track record, with their claims of attacks on other companies later confirmed to be true. While the leaking of source code makes it easier to find vulnerabilities in a company's software, Microsoft has previously stated that leaked source code does not create an elevation of risk. Microsoft says that their threat model assumes that threat actors already understand how their software works, whether through reverse engineering or previous source code leaks. "At Microsoft, we have an inner source approach -- the use of open source software development best practices and an open source-like culture -- to making source code viewable within Microsoft. This means we do not rely on the secrecy of source code for the security of products, and our threat models assume that attackers have knowledge of source code," explained Microsoft in a blog post about the SolarWinds attackers gaining access to their source code. "So viewing source code isn't tied to elevation of risk." However, source code repositories also commonly contain access tokens, credentials, API keys, and even code signing certificates.Read more of this story at Slashdot.